An enterprise is designing its detection strategy and must choose which telemetry source to prioritize for early detection of command-and-control (C2) activity. They have limited SIEM ingestion capacity and need the highest-fidelity signal. Which source should they prioritize?

Security Command Center (SCC) findings

Google Threat Intelligence (GTI) feeds

Google CloudProfessional Security Operations Engineer

Domain 1Objective 1

1.1 Enhancing Detection and Response PROFESSIONAL-SECURITY-OPERATIONS-ENGINEER Practice Questions (Page 6)

Part of the Platform operations domain, which accounts for 14% of the PROFESSIONAL-SECURITY-OPERATIONS-ENGINEER exam.

26questions here

6free pages

5concepts

14%of the exam

Questions 26–26

26application · medium
An enterprise is designing its detection strategy and must choose which telemetry source to prioritize for early detection of command-and-control (C2) activity. They have limited SIEM ingestion capacity and need the highest-fidelity signal. Which source should they prioritize?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to PROFESSIONAL-SECURITY-OPERATIONS-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Google Cloud. “PROFESSIONAL-SECURITY-OPERATIONS-ENGINEER” is a trademark of its owner, used for identification only.

1.1 Enhancing Detection and Response PROFESSIONAL-SECURITY-OPERATIONS-ENGINEER Practice Questions (Page 6)

Questions 26–26

An enterprise is designing its detection strategy and must choose which telemetry source to prioritize for early detection of command-and-control (C2) activity. They have limited SIEM ingestion capacity and need the highest-fidelity signal. Which source should they prioritize?

Keep studying — Platform operations